7194 matches found
CVE-2008-4192
The pservershutdown function in fenceegenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file...
NMS DVD Burning SDK 'NMSDVDX.dll' ActiveX控件任意文件覆盖漏洞
BUGTRAQ ID: 31374 CNCAN ID：CNCAN-2008092609 NMS DVD Burning SDK是一款用于刻录DVD光盘的工具包。 NMS DVD Burning SDK包含的ActiveX控件存在任意文件覆盖问题，远程攻击者可以利用漏洞以登录用户进程权限执行任意程序。 问题是'NMSDVDX.dll' ActiveX控件处理"EnableLog"和"LogMessage"方法存在问题，构建恶意WEB页，诱使用户访问，可覆盖系统文件，执行任意程序。 Numedia Soft Inc. NMSDVDX DVD Burning SDK 1.008 Numedia...
CVE-2008-4191
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file...
CVE-2008-4190
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the 1 ipseclive.conn and 2 ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream...
Design/Logic Flaw
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the 1 ipseclive.conn and 2 ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream...
CVE-2008-4191
CVE-2008-4191 affects Emacspeak 26 and 28, where extract-table.pl can be exploited by a local user via a symlink attack on the temporary file extract-table.csv, enabling overwriting arbitrary files. The vulnerability arises from insecure handling of a /tmp-like file, with impact described as loca...
Gentoo Security Advisory GLSA 200404-20 (xine)
The remote host is missing updates announced in advisory GLSA 200404-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200709-08 (id3lib)
The remote host is missing updates announced in advisory GLSA 200709-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200611-10 (wordpress)
The remote host is missing updates announced in advisory GLSA 200611-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Chilkat XML ActiveX Remote Arbitrary File Creation/Execution Exploit
No description provided by source. ----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42 ProgID:...
Gentoo Security Advisory GLSA 200410-02 (Netpbm)
The remote host is missing updates announced in advisory GLSA 200410-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-4108
Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...
CVE-2008-4085
plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on 1 cut.$$, 2 head.$$, 3 awk.$$, and 4 ps.$$ temporary files in /tmp/...
CVE-2008-4085
plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on 1 cut.$$, 2 head.$$, 3 awk.$$, and 4 ps.$$ temporary files in /tmp/...
Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite (2)
Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite 2 source: https://www.securityfocus.com/bid/31069/info Microsoft Windows Image Acquisition Logger ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controll...
Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite (1)
source: https://www.securityfocus.com/bid/31069/info Microsoft Windows Image Acquisition Logger ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control fails to sanitize user-supplied input. ...
Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite (1)
Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite 1 source: https://www.securityfocus.com/bid/31069/info Microsoft Windows Image Acquisition Logger ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controll...
Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite (2)
source: https://www.securityfocus.com/bid/31069/info Microsoft Windows Image Acquisition Logger ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control fails to sanitize user-supplied input. ...
